What options exist for enforcing MFA and SSO for an enterprise application that supports neither?

If SSO and MFA are required for application ABC but it does not integrate with any SSO/MFA providers, what options exist outside of simply finding a new application?

Is there a solution that "bolts on" or acts as an intermediary where MFA is possible before authenticating to the application itself? If not, what mitigating controls are possible?

abc application cybersecurity enterprise integrate mfa options solution sso